1,227 grc jobs at 709 companies in United States
GRC Analyst
United States
$120k-$130k/yr RemoteFull Time
4+ YOEBachelor's degree in Information Security, Computer Science, Business, or related field (or equivalent experience); 4+ years in GRC, IT audit, information security, or compliance; working knowledge of SOC 2, ISO 27001, and DORA; experience with risk register tools, Trust Centers, GRC platforms, and ticketing systems.
SOC 2, ISO 27001, DORA, risk register tools, Trust Centers, GRC platforms, ticketing systems
GRC Analyst
New York City, New York, United States
$108k-$125k/yr HybridFull Time
3+ YOE3+ years GRC, IT audit, security compliance, or privacy compliance experience; proven experience with SOX, SOC, PCI, NIST, or ISO frameworks; experience evaluating IT controls and supporting vendor risk programs; working knowledge of SaaS and cloud environments.
GRC platforms, workflow platforms
GRC Analyst III
Chicago, Illinois, United States
$120k-$140k/yr HybridFull Time
7+ YOEBachelor's degree in Information Systems, Cybersecurity, Risk Management, Business, Audit or related field; 7+ years GRC/information security experience; GRC platform implementation; knowledge of NIST, CIS, ISO 27001, SOC 2, CMMC, DFARS; professional certification preferred.
GRC platform
GRC Lead
New York City, New York, United States
OnsiteFull Time
6+ YOE6+ years in GRC, security compliance, or IT audit in B2B SaaS; ownership of SOC 2/ISO 27001; AI governance and regulatory knowledge; risk and policy experience; ability to read code and verify controls.
Senior GRC Analyst, GRC Technology Lead
Dallas, Texas, United States
OnsiteFull Time
3+ YOEBachelor's degree and 3–6 years in GRC, risk, compliance, or IT audit; 2+ years administering an enterprise GRC platform; experience with reporting, integrations, migration, and control mapping.
Workiva, Onspring, Archer, ServiceNow, Microsoft Excel, SQL
GRC Analyst
Austin, Texas, United States
OnsiteFull Time
3+ YOE3+ years in security compliance, IT audit, or GRC; at least one SOC 2 cycle owned end-to-end; technical depth to evaluate controls; experience with GRC platforms like Secureframe, Vanta, or Drata; strong organizational and interpersonal skills.
Secureframe, Vanta, Drata, SIEM
GRC Manager
Chicago, Illinois, United States
$131k/yr OnsiteFull Time
7+ YOE7-10 years progressive IT GRC or information security experience; deep knowledge of SOC 2, ISO 27001, NIST CSF; hands-on GRC platform experience; proven vendor risk and DSAR management; strong communication and program management skills.
Vanta, Drata, OneTrust
GRC Engineer
Sunnyvale, California, United States
$160k-$190k/yr OnsiteFull Time
5+ YOEBachelor's or Master's in Information Security, Computer Science, Engineering or related field; 5-8 years GRC/risk/compliance experience; active security certification (CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor); experience with GRC platforms and automation.
Vanta, Anecdotes, Drata, OneTrust
GRC Engineer
Arlington, Virginia, United States
$155k-$185k/yr HybridFull Time
3+ YOE3+ years GRC engineering, security engineering, or compliance with hands-on technical work; expertise in SOC 2, CMMC, FedRAMP, NIST CSF, GDPR; BA/BS or equivalent; CISSP, CISA, CRISC preferred; scripting (Python, Go, TypeScript) and GRC tooling (Vanta, Drata, Secureframe, OneTrust) a plus.
AWS, GCP, Azure, Python, Go, TypeScript, Vanta, Drata, Secureframe, OneTrust
GRC Analyst
San Francisco, California, United States
$164k-$205k/yr HybridFull Time
Senior-level GRC or compliance experience in SaaS, hands-on SOC 2 ownership, technical curiosity with AI coding tools, clear writing, startup ownership mindset.
Vanta, Drata, Claude Code
GRC Analyst
Boston, Massachusetts, United States
$83k-$105k/yr HybridFull Time
2+ YOERequires 2+ years in GRC or information security, strong project management and communication skills, Microsoft Office and Oracle proficiency, and knowledge of security standards and privacy regulations.
Microsoft Office, Oracle, ISO 27001, ISO 27002, ITIL, Identity and Access Management (IAM)
GRC Analyst
United States
$75k-$80k/yr RemoteFull Time
3+ YOEBachelor's degree or equivalent experience; 3+ years in governance, risk, and compliance; regulated-environment experience; HIPAA, HITECH, SOC 2, GRC platforms, and security frameworks knowledge.
Drata, NIST CSF, NIST SP 800 series, ISO/IEC 27000 series
Senior GRC Engineer
New York City, New York, United States
$181k-$244k/yr HybridFull Time
6+ YOE6+ years in security engineering, GRC, or DevSecOps; scripting in Python or Bash; working knowledge of at least two compliance frameworks; GRC platform proficiency; ability to build diagrams and translate requirements.
Python, Bash, Drata, Vanta, Hyperproof, Archer, OneTrust, ServiceNow GRC
Manager, GRC
United States
$194k-$228k/yr RemoteFull Time
8+ YOERequires 8+ years in technology risk, IT controls, audit, cybersecurity risk, or compliance; full-stack GRC experience; technical governance expertise; and proven team management and stakeholder influence.
generative AI
GRC Analyst
United States
$134k-$202k/yr RemoteFull Time
3+ YOE3+ years supporting audit lifecycle in cloud environments; manage ISO/SOC/HIPAA/PCI compliance, collaborate with engineering, strong project management and communication; familiarity with cloud and GRC tools.
Azure, AWS, Drata, Linear, Datadog
Director, Security - GRC
Addison, Texas, United States
OnsiteFull Time
8+ YOEBachelor's degree in Computer Science or Information Security; 8–10 years risk management experience; 3–4 years project management; GRC, audits, TPRM, privacy frameworks, and stakeholder leadership experience.
GRC, SOX, SOC2 Type 2, PCI, NIST, HIPAA, SaaS, TPRM
GRC Manager
Toronto or New York City
RemoteFull Time
Experienced in running GRC and security compliance programs (SOC 2, ISO 27001, ISO 42001), audit coordination, risk management, cloud security (AWS/Azure), and cross-functional stakeholder collaboration.
SOC 2, ISO 27001, ISO 42001, NIST CSF, GDPR, EU AI Act, AWS, Azure, Vanta, Drata, Secureframe, OneTrust, Archer
GRC Engineer
United States
RemoteFull Time
4+ YOE4+ years in GRC, security compliance or audit at a SaaS company; ran SOC 2 Type II end to end; technical with scripting (Python or similar) and APIs; working knowledge of privacy regimes; organized and self-directed.
Python, APIs
GRC Analyst
United States
$95k-$105k/yr RemoteFull Time
3+ YOEBachelor's degree in Business, Information Security, Risk Management or related field; 3-5 years GRC, risk, compliance or audit experience; familiarity with SOC 2, ISO 27001, HIPAA, FedRAMP; strong organizational and collaboration skills.
Senior GRC Specialist
San Mateo, California, United States
OnsiteFull Time
5+ YOE5+ years in GRC/IT audit or information security; working knowledge of SOC 2, ISO 27001/27701/42001, NIST CSF, HIPAA, GDPR; experience with GRC platforms, user access reviews, security awareness tooling, and cloud environments; strong communication.
Anecdotes, Vanta, Drata, Secureframe, OneTrust, ServiceNow GRC, Adaptive Security, KnowBe4, Hoxhunt, Proofpoint, AWS, GCP, Azure
Explore Jobs